
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
File: vNzosG8FliNAMAycR0e1olGiGcQ.mft (raw, json)
Hash identifier: YsgOyoQ2coX1hGIpc8oHSr5eYuWX50f27pw1SZVjxbA=
Subject key identifier: 40:C5:50:D2:D5:8D:F1:87:38:20:C2:3B:12:5C:10:C7:44:1C:52:51
Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
Certificate issuer: /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Certificate serial: 35A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
Manifest number: 3597
Signing time: Tue 06 Oct 2026 14:54:32 +0000
Manifest this update: Tue 06 Oct 2026 14:54:31 +0000
Manifest next update: Tue 13 Oct 2026 14:54:31 +0000
Files and hashes: 1: vNzosG8FliNAMAycR0e1olGiGcQ.crl (hash: Ff9OjxiJHEkXpWRPooC6Z7MorqtEQhw5AQbJqKdgmhg=)
2: 3FEFA562483D11EC82E81112C4F9AE02.roa (hash: pMo/am4pbVZVWLjF2BRkcuubhLlI+aH0WTEo1tPr5yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C65E8, serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Validity
Not Before: Oct 6 14:54:31 2026 GMT
Not After : Oct 13 14:54:31 2026 GMT
Subject: CN=6ac50ba8-1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:b7:3b:b4:a0:0e:4b:dc:47:5e:6a:c0:9c:
aa:97:fe:1e:cf:3b:c1:39:91:84:dc:0b:48:52:18:
aa:58:c7:12:8c:21:ff:0b:83:b3:a3:d1:6f:17:b2:
75:14:77:8d:dc:48:04:fd:6f:54:9c:8d:c0:cd:ad:
b1:2f:8f:c6:4b:21:9f:32:05:a0:f8:34:0a:db:94:
cf:86:dd:88:d6:2b:7d:bb:dd:4a:da:77:cb:ae:09:
b1:e5:14:cb:22:4f:d3:c1:08:69:9c:f2:ed:af:67:
5e:60:f2:47:69:a8:c5:0b:cd:fc:22:f0:87:98:14:
65:00:c0:cc:e5:3f:0d:60:5f:7c:9b:14:55:be:cd:
47:f5:35:0a:ea:c3:a7:8d:49:36:c5:6d:38:13:c8:
c0:6b:09:86:f1:77:ce:ca:b3:f7:3e:3a:dd:f7:1c:
3e:5f:38:f9:6d:1e:92:8a:c6:b9:ca:65:70:87:68:
e2:58:ac:18:75:76:69:84:16:c0:55:0f:78:c0:36:
fd:87:b6:66:10:29:bf:28:f8:a8:25:a3:c8:88:34:
c8:26:27:dd:79:39:ca:ce:aa:00:58:95:59:45:12:
56:62:44:f5:ae:7b:65:74:8b:6f:9c:11:91:cb:d3:
35:2e:bb:5f:1b:b9:e2:bf:62:0e:08:19:aa:3b:58:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C5:50:D2:D5:8D:F1:87:38:20:C2:3B:12:5C:10:C7:44:1C:52:51
X509v3 Authority Key Identifier:
keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:63:a8:35:87:f2:64:eb:52:c1:aa:e6:83:75:0a:ff:c5:ea:
6e:b8:86:f1:9d:1c:25:39:10:49:a6:a3:e4:55:7b:bd:40:75:
ad:68:1e:6e:97:d7:81:06:8e:67:e7:c3:82:87:df:73:c3:17:
0b:72:fd:3c:2c:6e:c7:7e:ea:98:36:3d:ff:23:80:e9:73:7b:
7e:29:60:8d:1e:2b:16:63:bb:30:c8:75:a1:9c:b3:fc:fd:4f:
1d:57:0a:b1:52:59:1d:ef:63:7c:69:a3:23:96:d6:86:46:29:
9c:9e:6f:1c:cf:f1:f6:2e:70:3d:25:fd:78:f3:6f:73:86:32:
c2:6d:79:f2:48:bd:69:6e:50:47:36:be:bf:1b:51:8e:0e:34:
4b:d9:35:99:c6:71:63:1e:3b:bb:30:7a:51:d8:ee:54:30:8e:
27:20:c1:0f:b4:80:48:d3:ad:a4:c2:de:e1:68:7f:9d:c7:d9:
31:62:ee:fa:d6:97:f2:96:49:7c:51:58:66:c1:8a:e4:57:1a:
e1:7e:be:bb:21:e9:0e:da:0d:1c:56:7b:4c:57:5e:2f:5a:7d:
53:a8:25:cd:23:b4:33:12:64:d7:fa:94:cc:9c:9a:76:3c:45:
0d:76:18:d3:01:1c:40:ed:80:47:66:cf:fb:ba:51:81:27:d9:
87:3f:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:50:40 2026 by rpki-client